macOS Configuration Guidance from the mSCP: Draft NIST SP
800-219r1 Available for Comment
NIST requests comments on the initial public draft of Special
Publication (SP) 800-219r1, Automated Secure Configuration
Guidance from the macOS Security Compliance Project (mSCP). It
provides resources that system administrators, security professionals, security
policy authors, information security officers, and auditors can leverage to
secure and assess macOS desktop and laptop system security in an automated way.
This publication introduces the mSCP, describes use cases for
leveraging the mSCP content, and introduces a new feature of the mSCP that
allows organizations to customize security rules more easily. The draft also
gives an overview of the resources available on the project’s GitHub site,
which provides practical, actionable recommendations in the form of secure baselines
and associated rules and is continuously updated to support each new release of
macOS.
The public comment period is open
through April 27, 2023. See the publication
details for a copy of the draft and instructions for submitting
comments.
NOTE:
A call for patent claims is included on page ii of this draft. For
additional information, see the Information Technology Laboratory
(ITL) Patent Policy–Inclusion of Patents in ITL Publications.